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DETAILED ACTION 

1 . Claims 1 -2, 4-9, 11,1 7-31 , 40-58 and 72-85 are pending in this application 

Continued Examination Under 37 CFR 1.114 

2. A request for continued examination under 37 CFR 1 .1 14, including the fee set forth in 37 
CFR 1 .1 7(e), was filed in this application after final rejection. Since this application is eligible for 
continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 .1 7(e) has been 
timely paid, the finality of the previous Office action has been withdrawn pursuant to 37 CFR 
1.114. Applicant's submission filed on March 23, 2009 has been entered. 

EXAMINER'S AMENDMENT 

3. An Examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to the Applicant, an amendment may be filed as provided by 37 CFR 
1 .31 2. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephonic interview by 
David S. Thompson on 05/12/2009. 

The application has been amended as follows: 

Claims: 

17-31. (Cancelled) 

40-55. (Cancelled) 

72-85. (Cancelled) 
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Allowable Subject Matter 

4. The following is an Examiner's statement of reasons for allowance: Claims 1-2, 4-9, 1 1 
and 56-58 are allowed. 

5. The prior art of record doesn't teach or suggest or render obvious either alone/or in 
combination: a data structure including a plurality of user id-user key pairs, each user id-user 
key pair comprising a user id associated with one of a plurality of users and a user key 
comprising a master key and a keyed-hash message authentication code encrypted using a 
hash of a password associated with the user ID; a data verification feature, comprising the 
keyed-hash message authentication code, is based on the hash of the password and is added 
to each of the plurality of different encryptions of the master key; selecting a user key from the 
data structure based on a received user id; preventing fraudulent access to data comprising: 
tracking attempts by a user to access data, and blocking attempts for a time period after a 
threshold number of failed attempts; reporting failed data access attempts to a system 
administrator according to user id; increase a time period a user must wait to attempt to access 
data after successive failed attempts to access the data; and, deleting a user id and a user key 
after a threshold number of failed attempts to access data; hashing a received password to 
produce a has value; decrypting the selected user key using the hash value to reproduce the 
master key; and decrypting the stored data using the master key. 
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6. Any comments considered necessary by the Applicant must by submitted no later than 
the payment of the issue fee and, to avoid processing delays, should preferable accompany the 
issue fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance or Examiner Amendment." 



Conclusion 

7. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to SUMAN DEBNATH whose telephone number is (571)270-1256. The 
examiner can normally be reached on 8 am to 5 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on 571 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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Examiner, Art Unit 2435 
/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



